IN THE CLAIMS 
Claims 1-6, 10-11, 14, 22-23, and 24 are amended: 

1 . (CURRENTLY AMENDED) An apparatus for encrypting/decrypting 
a real-time input stream, comprising: 

a control unit receiving a data stream of bytes byto un i ts wherein the data 
stream is an MPEG data stream or a Digital Satellite Service (DSS) data stream, 
converting the data stream into data blocks block data , and outputt i ng providing 
the data blocks b l ock d a ta for encryption or decryption, th o contro l unit receiv i ng - 
receiving encrypted or decrypted data blocks b l ock data , converting the received 
encrypted or decrypted data blocks block data into bytes byte u nits, and 
outputting the bvtes conv o rt o d block data of the byto un i ts ; 

a key schedule unit carrying out a key schedule for every round in 
accordance with a variable key size a nd a k e y value of a b l ock inputted from 
outs i d e so as to output a key value for the encryption or decryption for each 
round , wherein the variable key size is one of 128, 192. and 256 bits ; and 

a block round unit receiving the converted data blocks d a t a of block un i ts 
from the control unit, receiving the key valu e from the key schedule unit, so as to 
c n rry out the e ncrypt i on or decrypt i on encrypting or decrypting the received data 
blocks , and outputting providing the encrypted or decrypted r e su l t data blocks to 
the control unit. 

2. (CURRENTLY AMENDED) The apparatus of claim 1 , the control 
unit comprising: 

an input buffer storing the data stream of bytes b y te u n its and converting 
the received data stream into the data blocks blo ck data having a predetermined 
size so as to output the converted data blocks block data to the block round unit; 
and 

an output buffer receiving the data blocks block data encrypted or 
decrypted in the block round unit and converting the received data blocks block 
data into the byte units so as to output a converted data. 
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3. (CURRENTLY AMENDED) The apparatus of claim 2, wherein the 
block round unit completes all round calculation of data having been currently 
encrypted or decrypted before a next data block block data is inputted from the 
control unit and then stores the corresponding result in the output buffer of the 
control unit. 

4. (CURRENTLY AMENDED) The apparatus of claim 1, wherein the 
key schedule unit carr ie s generates o ut in e v e ry round the k e y sch e dul e on a the 
key required for the block round unit to process each round so as to output the 
key scho du lo d r e su l t to the block round unit in each round . 

5. (CURRENTLY AMENDED) The apparatus of claim 4, the key 
schedule unit comprising: 

a key expansion unit expanding the inputted key value into a size 
amounting to {block size * (count of rounds +1)}; and 

a key selection unit selecting a 128 bits k e y bit key required for each 
round from the expanded key value so as to output the selected key to the block 
round unit. 

6. (CURRENTLY AMENDED) The apparatus of claim 1 , wherein the 
key schedule unit expands the inputted key value into a size of {block size * 
(count of rounds + 1 )} and then carries out a step of selecting the 128 bits-key bit 
key required for each round using one key register. 

7. (ORIGINAL) The apparatus of claim 6, wherein the key schedule unit 
comprises the key register amounting to the key value required substantially for 
one round. 

8. (ORIGINAL) The apparatus of claim 7, wherein the key register has a 
capacity amounting to {(size of an inputted block) * (size of one round)}. 

9. (ORIGINAL) The apparatus of claim 1 , wherein the control unit generates 
a control signal to produce the key value every round and then outputs the 
control signal to the key schedule unit. 
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1 0. {CURRENTLY AMENDED) An apparatus for encrypting/decrypting 
a real-time input data stream wherein the data stream is an MPEG data stream 
or a Digital Satellite Service (DSS) data stream, comprising: 

a control unit receiving a data stream in first data format, converting the 
data stream and outputting data in a second data format for encryption or 
decryption; 

a key schedule unit in communication with the control unit and carrying out 
a key schedule every round in response to a size-and a k e y va l u e a variable key 
size and outputting a key value for the encryption or decryption for each round 
wherein the variable key size is one of 128, 192, and 256 bits ; and 

a block round unit in communication with the control unit and the key 
schedule unit and receiving converted data in second data format from the 
control unit, receiving the key va l ue from the key schedule unit so as to carry out 
at least one of the encryption or decryption, and outputting the encrypted or 
decrypted result to the control unit. 

1 1 . (CURRENTLY AMENDED) The apparatus of claim 10, wherein the 
first data format is in bytes a byt e un i t , and the second data format is in a data 
block b l oc k d a t a. 

12. (ORIGINAL) The apparatus of claim 10, the control unit comprising: 
an input buffer storing the data stream of the first data format and 

converting the received data stream into the data of the second data format 
having a predetermined size; and 

an output buffer receiving data in the second data format and converting 
the data into the first data format. 

13. (ORIGINAL) The apparatus of claim 12, wherein the block round unit 
substantially completes all data encryption or decryption processing before a 
next set of data is inputted from the control unit and stores the corresponding 
result in the output buffer of the control unit. 
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14. (CURRENTLY AMENDED) The apparatus of claim 10, wherein the 
key schedule unit outputs a key schedule result in response to the key valu o 
variable key size to the block round unit in every round. 

1 5. (ORIGINAL) The apparatus of claim 14, the key schedule unit comprising: 
a key expansion unit expanding the inputted key value into a size 

substantially equal to {second data format size * (count of rounds +1)}; and 

a key selection unit selecting an N bit key required for each round from the 
expanded key value to output the selected key to the block round unit. 

16. (ORIGINAL) The apparatus of claim 15, wherein the N bit key is equal to 
a 128 bit key. 

1 7. (ORIGINAL) The apparatus of claim 1 0, wherein the key schedule unit 
expands the inputted key value into a size of {second data format size * (count of 
rounds + 1 )} and then carries out a step of selecting an N bit key for each round. 

18. (ORIGINAL) The apparatus of claim 17, wherein the N bit key is equal to 
a 128 bit key. 

19. (ORIGINAL) The apparatus of claim 15, wherein the key schedule unit 
has a key register capable of processing the key value required substantially for 
one round. 

20. (ORIGINAL) The apparatus of claim 17, wherein a size of the key register 
is no less than {(second data format size) * (size of one round)}. 

21. (ORIGINAL) The apparatus of claim 10, wherein the control unit 
generates a control signal to produce the key value in every round. 
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22. (CURRENTLY AMENDED) A real-time encryption/decryption 
apparatus, comprising: 

a control unit receiving a data stream in first data format wherein the data 
stream data is an MPEG data stream or a Digital Satellite Service (DSS) data 
stream, converting the data stream and outputting data in a second data format 
for encryption or decryption; 

a key schedule unit in communication with the control unit and carrying out 
a key schedule in a predetermined period in response to a s i z o a nd a k e y va l u o a 
variable key size, wherein the variable key size is one of 128. 192, and 256 bites . 
and wherein the schedule unit has a key register capable of processing the key 
va l uo required substantially for the predetermined period; and 

a block round unit in communication with the control unit and the key 
schedule unit and receiving converted data in second data format from the 
control unit, receiving the key value from the key schedule unit so as to carry out 
at least one of the encryption or decryption. 

23. (CURRENTLY AMENDED) The apparatus of claim 22, wherein the 
first data format is in bytes a byt e un i t , and the second data format is in a data 
block block data . 

24. (CURRENTLY AMENDED) The apparatus of claim 22, wherein a 
size of the key register is no less than {(second data format size) * (size of one 
period f o u nd )}. 
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